U.S. Department of Homeland Security 
Washington, DC 20528 



Homeland 

Security 


May 31, 2019 

SENT BY ELECTRONIC MAIL TO: foia@americanoversight.org 

Clay M. Goode 

Austin R. Evers 

Katherine Anthony 

American Oversight 

1030 15th Street NW, Suite B255 

Washington, DC 20005 

Re: Freedom of Information Act Request 2019-IAFO-00055 
Dear Mr. Goode: 

This is the final response to your Freedom of Information Act (FOIA) request to the Department 
of Homeland Security (DHS), Intelligence and Analysis (I&A) dated November 15, 2018 and 
received on February 4, 2019. I&A FOIA has determined that you are requesting the following 
records: 

1. Records sufficient to show the number of intelligence analysts within the Office of 
Intelligence & Analysis assigned to working on non-Islamist domestic terrorism threats, 
including right-wing extremism (including, but not limited to, threats or attacks 
motivated by white supremacist or antigovemment ideology), since January 20, 2009. 

2. Any decision memoranda, guidance, or other written communications, regarding any 
change to the number of intelligence analysts within the Office of Intelligence & 
Analysis assigned to working the above element since January 20, 2017. 

3. Records describing the processing of this request, including records sufficient to 
identify search terms used and locations and custodians searched and any tracking sheets 
used to track the processing of this request. If the Office of Intelligence & Analysis uses 
FOIA questionnaires or certifications completed by individual custodians or components 
to determine whether they possess responsive materials or to describe how they 
conducted searches, we also request any such records prepared in connection with the 
processing of this request. 

In regards to your three above elements, I&A FOIA made the determination to conduct the 
following search: 

1 &2. The numbers of I&A personnel who worked on non-Islamist domestic terrorism 
threats, including right-wing extremism in 2009 and 2017. 


3. Records produced that contained the search terms you provided, “ideology” “white 
supremacist” and “Islam...” 



The result is a collaboration of thirteen analysis worked on domestic terrorism threats. 

After considering the nature of your request, I&A has determined that the fact of the existence or 
nonexistence of records pertaining to your request would be exempted from disclosure pursuant 
to the Freedom of Information Act (FOIA) Exemptions 3 and 7(E). Your request is denied under 
exemption 3 pursuant to Title 50 US Code § 3024(i) and 6 U.S.C. § 121(d)(l 1), which protect 
intelligence sources and methods from unauthorized disclosure. Additionally, we are neither 
confirming nor denying the existence of records under exemption 7(E) as disclosure of the 
information you requested would reveal law enforcement techniques or procedures and the 
circumstances under which those procedures ore techniques were used. Also, these records are 
exempted pursuant to Exemptions 6 and 7(C) of the FOIA, 5 U.S.C. § 552(b)(6) and (b)(7)(C). 
I&A hereby neither confirms nor denies that such records may or may not exist. 

You have a right to appeal the above withholding determination. Should you wish to do so, you 
must send your appeal and a copy of this letter, within 90 days of the date of this letter, to: 
Privacy Office, Attn: FOIA Appeals, U.S. Department of Homeland Security, 245 Murray Lane, 
SW, Mail Stop 0655, Washington, D.C. 20528-0655, following the procedures outlined in the 
DHS FOIA regulations at 6 C.F.R. Part 5 § 5.8. Your envelope and letter should be marked 
“FOIA Appeal.” Copies of the FOIA and DHS FOIA regulations are available at 
www.dhs.gov/foia . 

NO FEES 

Provisions of FOIA [AND THE PRIVACY ACT] allow DHS to charge for processing fees, up 
to $25, unless you seek a waiver of fees. In this instance, because the cost is below the $25 
minimum, there is no charge. 

You may contact the FOIA Requester Service Center for the Intelligence and Analysis (I&A), as 
well as our the Public Liaison, Brendan Henry for any further assistance; to discuss any aspect 
of your request; to discuss reformulation of your request; and/or to discuss an alternative time 
frame for the processing of your request at: 

U.S. Department of Homeland Security 
Intelligence and Analysis (I&A) 

Email: I&AFOIA@HO.DHS.GOV 
Telephone: (202) 282-8826 
Refer to 2019-IAFO-00055 


Additionally, you may contact the Office of Government Information Services (OGIS) at the 
National Archives and Records Administration to inquire about the FOIA dispute resolution 
services it offers. The contact information for OGIS is: 

Office of Government Information Services 
National Archives and Records Administration 
8601 Adelphi Road-OGIS 
College Park, Maryland 20740-6001 

1 For your information, Congress excluded three discrete categories of law enforcement and national security records from the requirements of the 
FOIA. See 5 U.S.C. 552(c) (2006 & Supp. IV 2010). This response is limited to those records that are subject to the requirements of the FOIA. 
This is a standard notification that is given to all our requesters and should not be taken as an indication that excluded records do, or do not, exist. 




Email: ogis@nara.gov 
Telephone: 202-741-5770 
Toll free: 1-877-684-6448 
Fax: 202-741-5769 

Please note that contacting any agency official (including the FOIA analyst, FOIA Requester 
Service Center, FOIA Public Liaison) and/or OGIS is not an alternative to filing an 
administrative appeal and does not stop the 90-day appeal clock. 

Sincerely, 

vUM© 

K. Small 

Assistant FOIA Officer 


1 For your information, Congress excluded three discrete categories of law enforcement and national security records from the requirements of the 
FOIA. See 5 U.S.C. 552(c) (2006 & Supp. IV 2010). This response is limited to those records that are subject to the requirements of the FOIA. 
This is a standard notification that is given to all our requesters and should not be taken as an indication that excluded records do, or do not, exist. 
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FIELD ANALYSIS REPORT 


Regional Analysis with Nationol Perspective. 



(U//FOUO) TTPs Used in Recent US Pipeline Attacks by Suspected 
Environmental Rights Extremists 


(U//FOUO) Prepared by the Montana Analysis and Technical Information Center (MATIC), Minnesota Fusion Center 
(MNFC), North Dakota State and Local Intelligence Center (NDSLIC), South Dakota Fusion Center (SDFC), Washington 
State Fusion Center (WSFC), the Illinois Statewide Terrorism & Intelligence Center (STIC), and the Iowa Division of 
Intelligence and Fusion Center (DOI/FC) jointly with the DHS Office of Intelligence and Analysis (l&A) and coordinated with 
Transportation Security Administration (TSA). 

(U) Scope: This Field Analysis Report (FAR) highlights recent criminal disruptions and violent incidents against pipeline 
projects in the Midwestern and Western United States in 2016, and shows how activities at these events compare with . 
larger environmental rights extremist strategic trends—including those related to targeting, tactics and procedures (TTPs). 7 
This product is intended to assist government and law enforcement security partners in identifying, deterring, preventing, 
and responding to potential threats against pipelines and related entities. It includes a discussion of drivers possibly 
affecting the future threat of pipeline-related violence from environmental rights extremist violence. 

(U) Key Judgments 

• (U//FOUO) We assess the October 2016 valve shutoff attacks against five pipelines along the US- 
Canada border by suspected environmental rights extremists showed a high level of pre-operational 
planning. 

• (U//LES) We assess suspected environmental rights extremists exploited Native Amencan causes in 
furtherance of their own violent agenda during a campaign to halt construction of the Dakota Access 
Pipeline (DAPL) in the Midwest and Western United States in 2016.* * 

• (U//FOUO) We assess that while some characteristics of a series of arsons against Iowa pipeline 
construction sites in 2016 could be indicative of an environmental rights extremist attack, other factors 
could reasonably suggest a possible non-ideological motive. This assessment is subject to change if 
new information emerges. Additionally, environmental rights extremism is a plausible motivation behind 
multiple attacks against construction equipment in North Dakota during the same period. 



‘ (U//FOUO) DHS defines environmental rights extremists as groups or individuals who facilitate or engage in acts 
of unlawful violence against people, businesses, or government entities perceived to be destroying, degrading, or 
exploiting the natural environment. 

t (U//FOUO) DHS defines terrorism as any activity that involves an act that is dangerous to human life or potentially 
destructive to critical infrastructure or key resources, and is a violation of the criminal laws of the United States or of 
any state or other subdivision of the United States and appears to be intended to intimidate or coerce a civilian 
population to influence the policy of a government by intimidation or coercion, or to affect the conduct of a 
government by mass destruction, assassination, or kidnapping. 

* (U) For background information on DAPL, see Appendix A. 

§ (U) Doxing attacks often include posting on websites targeting individuals' personal background, associates or 
family, place of employment, home address, or contact information 
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♦ (U//FOUO) We assess environmental rights extremists are likely to use some of these same criminal 
and violent tactics in attempts to disrupt other energy projects elsewhere in the United States— 
including those related to pipeline construction—in the coming year. 

(U) Significant Incidents in 2016 


(U//FOUO) Pipelines and associated 
construction projects in the Midwestern and 
Western United States in 2016 were targeted 
with multiple criminal and violent acts designed 
to disrupt fossil fuel transportation infrastructure 
and impede or injure law enforcement. These 
include valve shutoffs along the northern border, 
destruction of construction equipment, and 
arson attacks against Iowa pipeline construction 
sites. 

(U) Valve Shutoffs along Northern 
Border 

(U//FOUO) We assess the October 2016 valve 
shutoff attacks against five pipelines along the 
US-Canada border by suspected environmental 
rights extremists showed a high level of pre- 
operational planning. Multiple teams— 
comprised of individuals who traveled from 
across the United States—conducted 
simultaneous attacks against remote valve sites, 
wore disguises, and executed contingency 
plans. 7- 12 The apparent ease with which these 
valve shutoff attacks were carried out and the 
heavy media coverage they attracted lead us to 
be concerned that other environmental rights 
extremists could also pursue coordinated 
attacks against the energy sector. Although 
these valve attacks did not result in any loss of 
life, manually shutting pipeline valves carries an 
inherent risk of death or serious injury if a 
pipeline ruptures. 

• (U//LES) On 11 October 2016, suspected environmental rights extremists shut down five pipelines along 
the US-Canadian border in Minnesota, Montana, North Dakota, and Washington for over severUjours. 
resulting in estimated financial losses in the hundreds of thousands of dollars, according toJ &4^* ^^ 

i 16 Nine individuals were subsequently 

arrested on charges related to tampering with pipeline valves and preventing the transportation of 
petroleum. The subjects claimed to have targeted the pipelines to show solidarity with actions against 
DAPL. They also called on the President to use emergency powers to keep the pipelines closed and 
requested a total ban on new fossil fuel extractions and an immediate end to use of tar sands and 


(U) Environmental Rights Extremists 

(U//LES) Environmental rights extremists have a long 
history of committing violent acts across the United States 
against entities they perceive are damaging the 
environment Since the movement's inception in the 
1980s, adherents have been responsible for many 
criminal acts and threats of violence, such as arson, as 
well as hundreds of other criminal acts resulting in 
damages in the tens of millions of dollars to targeted 
corporations and businesses, including energy and 
transportation industry targets 1 ‘* r Motivations for 
violence tend to mirror those of the larger nonviolent 
environmentalist movement and include such factors as 
anger over perceived environmental destruction during 
the oil-drilling method known as "fracking.” perceived 
environmental and habitat destruction during mining of 
Canadian tar sands oil that is shipped to the United States 
via pipelines, and by fears of contamination to water 
supplies in the event of future pipeline leaks. 2 3 4 
Environmental rights extremists often consider 
themselves to be nonviolent because their attacks tend to 
be against property and are intended to only inflict 
economic damage. However, the use of some tactics— 
such as shutting off pipeline valves or committing arson to 
construction equipment used in building pipelines—carry 
an inherent risk of death or serious injury, regardless of 
intent. For example, pipelines can rupture as a result of 
tampering, and fires started by arson can inadvertently 
spread to non-targeted areas and result in serious 
injuries. Although some recent and historical 
environmental rights extremist attacks and disrupted plots 
have involved use of lEDs, bombing attacks from the 
movement are uncommon. 5 * 6 


* (U//FOUO) DHS recognizes that individuals associated with various groups and movements participated in criminal 
and violent acts against pipelines in 2016. For the purposes of this paper, these individuals are referred to as 
environmental rights extremists, as these campaigns were fundamentally about protecting the environment—whether 
that is opposing oil pipeline construction projects or protecting the indigenous water supply from pollution 
t (U) For other examples of environmental rights extremists attacks against the energy sector, see Appendix B 
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(U) OBSERVATIONS/TTPS 



’ (U) For background information on tar sands, see Appendix C. 
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(U) Escalation to Violence at DAPL Occupation in North Dakota 

(U//LES) We assess that starting in the summer of 2016. suspected environmental rights 
extremists exploited Native American anti-DAPL protests to attract new members to their 
movement, gain public sympathy, and justify their criminal and violent acts. 39 40 Native 
American tribes claim the pipeline route crosses sacred sites and burial places, and they are 
concerned a future pipeline rupture could pollute tribal drinking water. 4 ' We assess the 
significant media attention and public sympathy gained by the environmental rights extremists 
from this new alliance with Native American tribes makes it likely environmental rights 
extremists will attempt to exploit indigenous causes for their own ideological purposes in future 
environment-related events. 42- 47 


(U//LES) Since August 2016, suspected environmental rights extremists have engaged in 
multiple violent incidents in North Dakota at illegal encampments on DAPL and U^rmv 
Corps of Engineers property in an effort to halt pipeline construction, according toB >*j 

‘ The occupation, which ended on 24 March 2017, resulted in 761 
arrests for various crimes—primarily on charges of criminal trespassing and engaging in a 
riot with individuals who traveled to the region from Califomia^epresentinc^h^araest 
number of arrests at 115, or 15.1 percent, according 

Individuals have engaged in physical assault and threats of physical assault, as well as use 
of Molotov cocktails and lEDs. 


(U) OBSERVATIONS/TTPS: 



(U) The Dakota Access Pipeline is sometimes referred to as the Bakken Oil Pipeline 
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(U) Construction Equipment and Pipelines Targeted in Iowa and the Dakotas 


(U//FOUO) We assess that a series of arsons against Iowa pipelin^onstructior^ite^r^^6 
could be indicative of an environmental rights extremist attack- 



-suggest a non-ideological motive. 00 This 
assessment is subject to change if new information emerges. Additionally, environmental rights 
extremism is a plausible motivation behind multiple attacks against construction equipment in 
North Dakota during the same period, as well as a series of attacks puncturing pipelines in Iowa 
and South Dakota in late February and March 2017. 


(U//LES) On 14 September, employees of a construction company reported an unknown 
individual(s) used firearms to shoot several rounds of ammunition into a portable toile^nd a 
backhoe at a pipeline construction site near Alexander, North Dakota. According 

two of the rounds were fired at, but did not penetrate, the backhoe's fuel tank, which 
could have sparked a fire. There were no injuries, and there have been no arrests or claims 
of responsibility for the attacks 84 


(U//LES) On 13 September, law enforcement arrested individuals for criminal mischief and 
trespassing after they allegedly sabotaged an under-construction pipeline at a site near New 
Salem. North Dakota by placing a crate of miscellaneous items in the pipe. According to the 

lad the crate gone undetected, it could have made the pipeline 
into a “pipe bomb” capable of killing bystanders once a “pig" is run through the pipeline.* The 
individuals also broke the keys off in the ignition of machinery and spray-painted the messages 
“WATER IS LIFE,” “NO DAPL," and “RISE UP!!! ILLINOIS + IOWA NO DAPL." 85 The individuals 
are awaiting trial. 


• (U) A “pig" is a device used to check for pipeline leaks. 
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(U//LES) On 6 September, an unknown number of individuals damaged electrical wires of 
construction equipment at an oil pipeline construction site near St. Anthony, North Dakota, creating 
a threat to worker safety. Additionally, the attackers cut hoses, punctured a tire, filled a radiator 
with fire extinguisher suppressant, and filled fuel tanks with dirt. There have been no arrests or 
claims of responsibility for the attacks. 86 

(U//LES) During the early morning hours of 31 July, 1 August, and 15 October, an unknown 
individual(s) set fires targeting heavy machinery at three construction sites associated with DAPL 
in Mahaska and Jasper Counties, Iowa, resulting in over $3 million in damage. 87 There have been 
no arrests or claims of responsibility for the attacks. 88 89 90 ' 91 

(U//LES) On 09 November, an unknown number of individuals set fire to four pieces of heavy 
construction equipment in Buena Vista County, Iowa According to law enforcement, two 
additional pieces of equipment were prepped for burning but not set on fire. There have been no 
claims of responsibility for the attack. 92 

(U//LES) Between 24 and 25 September, unidentified environmental extremists sabotaged five 
pieces of heavy equipment at DAPL site near Winfred, South Dakota. The sabotage included 
cutting brakes and electrical wiring, causing a potential threat to worker safety. Additionally, dirt 
was found in the motor, and rocks and gravel were found in swing boxes. Estimated damages are 
over $50,000. Two individuals were identified as suspects and provisionally charged with first 
degree vandalism pending arrest. 93 


(U) OBSERVATIONS/TTPS: 
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(U//FOUO) Outlook: Tactics and Drivers of Pipeline-Related Violence in Near Term 

(U//FOUO) We assess environmental rights extremists are likely to use some of these same 
criminal and violent tactics in attempts to disrupt other US energy projects for the remainder of 
2017. Most of these tactics, which are available online for all to see, are relatively easy to carry 
out have perceived utility among environmental rights extremists in the larger effort to halt DAPL 
construction. 

(U//FOUO) We further assess the following developments, if observed, could lead to an increased 
threat of violence in the coming months from environmental rights extremists against pipeline- 
related entities in the Midwest and Western United States: 



(U//FOUO) We assess the following developments, if observed, could lead to a decreased threat 
of violence: 



(U) Intelligence Gaps 
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(U//FOUO) Comments, requests, or shareable intelligence may be directed to: STIC at 877-455-7842 or 
STIC@isp.state.il.us; DOI/FC at 515-725-6310 or intca@dps.state.ia.us; MNFC at 651-793-3730 or 
mn.fc@state,mn.us; MATIC at 406-444-1330 or dojintel@mt.gov; NDSLIC at 701-328-8172 or ndslic@nd.gov; 
SDFC at 866-466-5263 or sdfusioncenter@state.sd.us; WSFC at 877-843-9522 or intake@wsfc.wa.gov. 



(U) Report Suspicious Activity 


(U) To report suspicious activity, law enforcement, Fire-EMS, private security personnel, and emergency managers 
should follow established protocols; all other personnel should call 911 or contact local law enforcement. Suspicious 
activity reports (SARs) will be forwarded to the appropriate fusion center and FBI Joint Terrorism Task Force for further action 
For more information on the Nationwide SAR Initiative, visit http://nsi ncirc.gov/resources aspx 


(U//LES) Tracked by: PIR-IA-CVE.2.2.2; PIR-IA-CVE 2.2.3 DHS-NFCA-2016/17-KIQ-24 HSEC-8.1, HSEC 8.2, FISEC-8.3; 
HSEC-8.5; HSEC-8.6; HSEC-8.8; HSEC-8 10’ HSEC-10.1; HSEC-10.2' HSEC-10.5' FISEC-10.6; HSEC-10.8; HSEC-10.10; 
IADOIFC-17-IRT1; IADOIFC-17-IRK1; IADOIFC-17-IRV6; MATIC-05.5.2015; MN01 3; MN07.1; ND-HSEC 8.1; ND-HSEC 
8.2; ND-HSEC 8 3; ND-HSEC 8.5; ND-HSEC 8 6; ND-HSEC 8.8; ND-HSEC 8 10; ND-HSEC 10.1; ND-HSEC10.2; ND- 
HSEC 10 5; ND-HSEC 10.6; ND-HSEC 10.8; ND-HSEC 10.10; HSEC-02-02000-P1-SD-2010; HSEC-02-03000-P1-SD- 
2010; STIC-SIN-8.1; STIC-SIN-12.1; STIC-SIN-12.7; STIC-SIN-12.11; WSFC-1.11 WSFC-1.3.1; WSFC-1.5; WSFC-1 6; 
WSFC-1.8.1; WSFC-1.8.2; WSFC-1.8.3; WSFC-1.9.5; WSFC-1.10.1. i , l 1 , 
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(U) Appendix A: The Dakota Access Pipeline 

(U//LES) The Dakota Access Pipeline project is an underway $3.78 billion construction project 
to build a 1,172-mile, 30-inch diameter pipeline for transporting US light sweet crude oil from 
the Bakken and Three Forks production areas of North Dakota to existing pipelines in Patoka, 
Illinois for further distribution to refining markets. 104 DAPL construction attracted controversy 
as a result of a North Dakota-based indigenous tribe’s claims that pipeline leaks would 
contaminate the water supply of their reservation. 105 In July 2016, the tribe filed a lawsuit 
against the US Army Corps of Engineers for its role in granting permits to build the pipeline. 106 
The lawsuit spurred a series of protests and demonstrations near the reservation. 107 Members 
of other Indian tribes—as well as environmental rights extremists who share the tribes’ 
underlying goal of halting construction of the pipeline—have traveled from across the United 
States and Canada to join the occupation. 108,109 Since August 2016, there have been 
hundreds of arrests for criminal and violent incidents at encampments set up by anti-pipeline 
groups and nearby DAPL-related sites in an effort to stymie construction efforts. 110,111 
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(U) Appendix B: Prior Energy Sector Attacks by Environmental Rights 

Extremists 


(U//FOUO) The pipeline attacks in the Midwest and Western United States in the latter half 
of 2016 were the first significant environmental rights extremist attacks targeting the 
transportation and energysectorssinceSeptember 2015. The last known attack specifically 
targeting a pipeline^m^^^^Ej3^S^~Si 

• (U//LES) On 16 September 2015, environmental rights extremist Rory Lynn 

Gunderman exchanged gunfire with South Dakota law enforcement officers and then 
fatally shot himself. Subsequently, law enforcement officers located Gun derman’s 
remote campsite in Custer County, South Dakota, where they discovered^ 



_I" 3 According to H^^^^^^^^HGunderman purchased numerous IED 

components in Spearfish, South Dakota on 8 September 2015. 114 Analysis of digital 
media in Gunderman’s possession revealed recently accessed copies of al-Qa'ida in 
the Arabian Peninsula’s Inspire magazine, including editions 1, 10, and 12. 115 Though 
the exact targets and timing of Gunderman’s plot remain unknown, his behavior and 
statements indicated a fixation on the energy sector. 116 Gunderman additionally 
claimed membership in the Crescent City, California-based Deep Green 
Resistance USPER . Though the group maintains it only engages in nonviolent activities, 
the organization promotes the belief that a separate “underground" is needed to 
conduct violent “direct action" in order to save humanity and other life on earth from 
environmental disaster. This violent direct ation would include attacks against critical 
infrastructure “to disrupt and dismantle industrial civilization." 117 


• (U//LES) In September 2014, a suspected environmental rights extremist(s) in 
Washington stole a bulldozer and drove it into the base of a US Department of Energy 
500-kilovolt powerline tower in an apparent attempt to knock the tower down. The 
incident did not result in any significant damage. Graffiti associated with anti-capitalism 
and environmental rights extremism was spray-painted at the scene and on nearby 
structures. Graffiti included the phrase '#killcap’’ (“Kill Capitalism"), “Corrupt Society," 
and “ELF," the acronym for the environmental rights extremist movement Earth 
Liberation Front. The case is currently under investigation. 118 - 119 

• (U) From 17 to 18 June 2012, environmental rights extremist Anson Chi USPER set off a 
series of explosive devices on top of an Atmos USPER gas pipeline in Plano, Texas. Chi 
intended to damage the pipeline and disrupt natural gas flow. He was sentenced to 20 
years in prison without parole on 30 June 2014. 120121 Chi pled guilty to a charge of 
attempting to destroy a natural gas pipeline used in interstate commerce, and to a 
charge of possessing an explosive device not registered with the National Firearms 
Registration and Transfer Record. 122 Chi also contacted well known convicted bomber 
Theodore Kaczynski USPfcR to be a mentor; Kaczynski eventually broke off contact and 
told Chi to seek professional help. 123 
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(U) Appendix C: Tar Sands 

(U) Several pipelines along the US-Canadian border carry crude oil into the United States for 
refinement and distribution. 124 Alberta, Canada has one of the world’s largest deposits of a 
particularly thick and heavy form of crude oil known as tar sands oil. Tar sands oil is 
controversial because of perceived negative impacts to the environment that occur during 
mining, processing, and transporting the oil—such as large CO 2 emissions contributing to 
climate change, contamination of groundwater during extraction, and destruction of natural 
resources used by indigenous tribes. 125 In October 2016, US environmental rights extremists 
engaged in coordinated attacks to disrupt five border pipelines perceived to be transporting 
tar sands oil from Canada into the United States. 126 
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(U//FOUO) Appendix D: Behavioral Indicators of Planned Criminal 
or Violent Activities Targeting Pipelines 

(U//FOUO) There are a number of potential behaviors and indicators of planned criminal or 
violent activities targeting pipelines and associated entities. Some of these behavioral 
indicators may be constitutionally protected activities and should be supported by additional 
facts to justify increased suspicions. 
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